An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

• A.Disable the RPF check at the FortiGate interface level for the reply check.
• B.Disable the RPF check at the FortiGate interface level for the source check.
• C.Enable asymmetric routing, so the RPF check will be bypassed.
• D.Enable asymmetric routing at the interface level.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.



The exhibit contains a network interface configuration, firewall policies, and a CLI console configuration.
How will FortiGate handle user authentication for traffic that arrives on the LAN interface?

• A.Users from the HR group will be prompted for authentication and can authenticate successfully with the correct credentials.
• B.Users from the Sales group will be prompted for authentication and can authenticate successfully with the correct credentials.
• C.Authentication is enforced at a policy level; all users will be prompted for authentication.
• D.If there is a full-through policy in place, users will not be prompted for authentication.

Comment: *

Name: *

Email: *

Verification: *

View the exhibit:

Which the FortiGate handle web proxy traffic rue? (Choose two.)

• A.Traffic between port1-VLAN1 and port2-VLAN1 is allowed by default.
• B.port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.
• C.Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.
• D.port-VLAN1 is the native VLAN for the port1 physical interface.

Comment: *

Name: *

Email: *

Verification: *

An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

• A.A session for denied traffic is created.
• B.Device detection on all interfaces is enforced for 30 minutes.
• C.The number of logs generated by denied traffic is reduced.
• D.Denied users are blocked for 30 minutes.

Comment: *

Name: *

Email: *

Verification: *

Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

• A.Log in to a downstream FortiSwitch device.
• B.Disable FortiAnalyzer logging for a downstream FortiGate device.
• C.Shut down/reboot a downstream FortiGate device.
• D.Ban or unban compromised hosts.

Comment: *

Name: *

Email: *

Verification: *